Approval of Phone-paid Services Authority's Code of Practice (fifteenth edition)
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
Approval of Phone-paid Services Authority’s Code of Practice (fifteenth edition) Consultation on whether Ofcom should approve a new edition of the Phone-paid Services Authority’s Code of Practice for regulating Premium Rate Services CONSULTATION: Publication Date: 30 April 2021 Closing Date for Responses: 11 June 2021
Contents Section 1. Overview 3 2. Background and legal framework 4 3. Approving the draft Code under section 121 of the Act 12 Annex A1. [Draft] Notification of Approval of a Code for Premium Rate Services under section 121 of the Communications Act 2003 23 A2. Responding to this consultation 25 A3. Ofcom’s consultation principles 27 A4. Consultation coversheet 28 A5. Consultation questions 29
1. Overview There are a range of interactive services that consumers can access via their landline and mobile phones, computers and digital TV. Where these services are charged for via the customer’s telephone bill or pre-pay account, they are known as phone-paid services or premium rate services (PRS). They include charity donations by text, music streaming, entering broadcast competitions, voting on TV talent shows and in-app purchases. These services are valued by those that use them, however in certain cases they can sometimes give rise to consumer harm. Ofcom has overall responsibility to make sure that consumers are protected by ensuring appropriate rules are in place and enforced. To achieve this, we have designated the Phone-paid Services Authority (PSA) to carry out the day-to-day regulation of premium rate services. The PSA regulates PRS by way of a Code of Practice. The current Code is the fourteenth edition, approved by Ofcom on 21 June 2016. On 8 April 2021 the PSA published a new draft Code of Practice (the draft Code) which is intended to ensure PRS regulation is fit for purpose in the coming years. In accordance with the statutory scheme, any draft Code must be considered and approved by Ofcom for it to have legal force. This consultation document sets out our assessment of the draft Code in light of the statutory legal tests which we must consider in approving the draft Code. Having assessed the draft Code of Practice against the relevant legal test we are minded to approve the new Code. Specifically, we provisionally consider that: (a) the PSA will have the function of administering and enforcing the draft Code; (b) the PSA is sufficiently independent of the providers of premium rate services; (c) there are adequate arrangements funding the activities of the PSA; (d) the provisions of the draft Code are objectively justifiable; (e) those provisions do not discriminate unduly against particular persons or against a particular description of persons; (f) those provisions are proportionate to what they are intended to achieve; and (g) they are transparent in relation to what those provisions are intended to achieve. We invite stakeholders to comment on this provisional decision. This is a six-week consultation and the closing date for responses is 11 June 2021. This consultation is happening alongside the PSA’s consultation on the draft Code. Subject to responses to our consultation, and the PSA’s consultation, we aim to publish a final decision in Autumn 2021. 3
2. Background and legal framework 2.1 This section sets out the background to our approval of the draft Code, including an overview of PRS, its regulation and the relevant statutory framework. Background Premium rate services 2.2 The concept of PRS is broad. In general terms, PRS are a form of micro-payment for paid for content, goods and services charged to a consumer’s bill for electronic communications services. Technically, they are services delivered via an Electronic Communications Network (ECN) and paid to the provider of an Electronic Communications Service (ECS). 2.3 These services may be accessed by way of a conventional voice call or SMS, but increasingly they are accessed in other ways, such as computers, smartphones or interactive digital TV. Common forms of PRS include charity donations by text, music streaming, broadcast competitions, directory enquiries, voting on TV talent shows and in- app purchases. 2.4 In 2013, Ofcom introduced an unbundled tariff for revenue-sharing numbers including the number ranges used for PRS. 1 The unbundled tariff was introduced to enable consumers to better understand how much of their money is paid to their phone company and how much is passed to others, such as the organisation or service being called (such as the PRS provider). It requires that, instead of paying a single charge to their phone company, customers pay two separate charges: a) the Access Charge: which will be paid to the phone company which originates the call; and b) the Service Charge: which is paid to the phone company which terminates the call and may be shared with the provider, i.e. the company providing a service using the number to cover or contribute towards their costs. Organisations and service providers must include their Service Charge whenever the number is presented (i.e. in advertising and marketing). 2.5 Certain service charges are subject to price caps. For example, Ofcom recently introduced a price cap in relation to directory enquiry services (i.e. 118 numbers). 2 1 Ofcom, Simplifying non-geographic numbers - Statement, 12 December 2013 2 Ofcom, Directory Enquiries (118) Review – Statement, 28 November 2018 4
Regulation of PRS 2.6 The Communications Act 2003 (the Act) provides a framework for the regulation of PRS. Section 120 of the Act sets out the power for Ofcom to set conditions for the “purposes of regulating the provision, content, promotion and marketing of premium rate services.” 2.7 The Act identifies which services qualify as PRS and hence may be subject to such a condition. It provides that a service is a PRS if: a) it is a service falling within section 120(8) of the Act (see below); b) there is a charge for the provision of the service; c) the charge is required to be paid to a person providing an electronic communications service by means of which the service in question is provided; and d) that charge is imposed in the form of a charge made by that person for the use of the electronic communications service. 3 2.8 A service falls within Section 120(8) if its provision consists in: a) the provision of the contents of communications transmitted by means of an electronic communications network; or b) allowing the user of an electronic communications service to make use, by the making of a transmission by means of that service, of a facility made available to the users of the electronic communications service. 2.9 In accordance with this framework Ofcom has set a condition (the PRS Condition) 4 that requires relevant providers to comply with directions given by the ‘Enforcement Authority’ in accordance with, or for the purposes of enforcement of, an ‘Approved Code.’ The PRS Condition applies only to certain PRS, known as Controlled PRS (CPRS): “Controlled Premium Rate Service” means a Premium Rate Service (other than a service which is only accessed via an International Call or a service which is delivered by means of an Electronic Communications Service and is provided by the person who is also the provider of the Electronic Communications Service) which falls within one or more of the following categories: (i) the service is obtained through a PRS Number 5 and the Service Charge for the call by means of which the service is obtained is a rate which exceeds 5.833 pence per minute or 5.833 pence per call, exclusive of value added tax; (ii) the service is obtained other than through a PRS Number, and the charge for the call by means of which the service is obtained or the rate according to which such call is charged is a charge or rate which exceeds 10 pence per minute inclusive of value added tax (and which also includes, for the 3 Section 120(7) of the Act 4 The PRS Condition was most recently updated in December 2018. See Ofcom, Review of the Premium Rate Services Condition – Statement, 19 December 2018 5 This is defined in paragraph 2(t) of the PRS Condition as a “Non-Geographic Number starting 087, 090, 091 or 118”. 5
avoidance of any doubt, a service delivered by means of an Electronic Communications Service which is charged by means of a Payment Mechanism and for which the charge exceeds 10 pence inclusive of value added tax); (iii) the service is a Chatline Service; (iv) the service is an Information, Connection or Signposting Service; (v) the service is Internet Dialler Software operated; or (vi) the service is a Sexual Entertainment Service.” 2.10 Section 121 of the Act gives Ofcom the power to approve a code made by another party for regulating the provision and contents of premium rate services. The current code was drafted by the Phone-paid Services Authority, which administers and enforces the code, and was approved by Ofcom in June 2016. 6 This is the fourteenth edition of PSA’s Code of Practice. 2.11 The Code sets out wide-ranging rules to protect consumers as well as setting out the processes that the PSA applies when enforcing the Code. It also provides for the PSA to be funded by way of a levy on industry. As noted above, the PRS Condition requires relevant providers (i.e. CPRS providers) to comply with any directions made by the PSA for the purposes of enforcing the Code. If a provider failed to do so, Ofcom could take enforcement action for breaching the PRS Condition. Where provision of PRS does not involve CPRS, such as where telephony services operate at tariffs below the relevant thresholds, the PRS Condition would not require compliance with PSA directions. 7 The draft Code of Practice 2.12 In 2020, the PSA published a discussion document in which it explained it was intending to carry out a major strategic review of the Code of Practice. The PSA said this was the first such review since the introduction of the twelfth Code of Practice in 2011, with subsequent Code reviews focussing on incremental changes. 2.13 The review was, in particular, intended to build on the PSA’s new strategic purpose, which it published in December 2019. This set out the PSA’s goal to be a more proactive regulator that seeks to address harm before it occurs while also strengthening the PSA’s existing approaches for addressing ongoing or historic harm. 2.14 On 8 April 2020, the PSA published its draft fifteenth Code of Practice and opened a period of public consultation. While this document summarises some of the key concepts and provisions contained within the draft Code, the full detail is available within the PSA’s documents and we encourage stakeholders to refer to those documents. 8 6 Ofcom, Approval of the PhonepayPlus Code of Practice (fourteenth edition), 21 June 2016 7 PRS providers may be required to respond to PSA information requests in order to assess the use of controlled PRS and any PRS operations falling outside the definition of controlled PRS. 8 See PSA’s Consultation on its new Code of Practice. 6
Overview of the Draft Code 2.15 The draft Code sets out a new regulatory approach for the PSA and has, at its heart, three key aims: a) Introducing standards in place of outcomes which the PSA expects will be clearer and easier for industry to implement, meet consumer expectations but also allows space for innovation. b) Focusing on prevention of harm rather than cure by introducing new provisions which enables the PSA to work with industry to build best practice and compliance, minimising the risk of consumer harm and the need for resource intensive enforcement. c) A code that is simpler and easier to comply with by as far as possible merging the current framework of Code of Practice, Special Conditions and other documents, into a single consolidated document. Standards and requirements 2.16 The draft Code introduces a number of consumer-orientated, organisation-orientated and service-specific standards and requirements. To some extent, these standards and requirements consolidate the regulatory rules and obligations contained within the 14th Code of Practice, special conditions and associated guidance. 9 In order to achieve each standard, providers will be required to meet each of the supporting requirements, which set out in more detail exactly what providers must do. 2.17 The regulatory standards are: a) Integrity: Providers must act with integrity and not bring the PRS market into disrepute. b) Transparency: Consumers must receive clear, complete and timely information to enable them to make fully informed decisions when purchasing phone-paid services. c) Fairness: Consumers must be treated fairly throughout their experience of PRS, including by being charged for PRS only where they have provided informed and explicit consent to such charges. d) Customer care: Consumers must receive excellent and timely customer care including the resolution of their complaints. e) Vulnerable consumers: Services must be promoted and provided in a way that ensures they are not likely to cause harm or detriment to consumers who are, or may be, vulnerable as a result of their particular circumstances, characteristics or needs. f) Consumer privacy: Consumer privacy must be respected and protected. 9 PSA, Code, Special conditions, compliance updates & guidance 7
g) Prevention of harm and offence: Promotions and services must be provided in a manner that does not cause harm or unreasonable offence or distress to consumers or to the general public. h) Organisation and service registration: Organisations and individuals involved in providing PRS must provide the PSA with timely, accurate and detailed information about themselves and the services they offer or intend to offer. i) Due diligence, risk assessment and control (DDRAC): Organisations and individuals must perform effective due diligence on any person or organisation with whom they contract in relation to PRS. They must conduct a full and thorough assessment of potential risks arising from the provision, content, promotion, and marketing of PRS on an ongoing basis. j) Systems: All systems, including payment and consent verification platforms, used for the provision of and exit from PRS must be technically robust and secure. 2.18 In addition to these general standards, the PSA has also identified specific requirements for certain services that it does not consider appropriate, or relevant, to apply more generally. These requirements build on some of the specific requirements of the current special conditions and apply to such services as society lottery services, competition services and remote gambling services. Supervision and verification 2.19 The draft Code introduces an increased focus on supervision and verification. This is intended to help deliver the PSA’s goal of moving to a more proactive regulatory model which is intended to prevent harm in the first place rather than dealing with issues after the harm has occurred. 2.20 In order to achieve this, the PSA has proposed a number of new powers to carry out its proposed new supervisory activities which, among other things, will enable it to assess a provider’s compliance with the code, to identify and resolve issues and, ultimately, to reduce the risk of actual or potential harm to consumers resulting from such non- compliance or other issues. These activities include assessing complaints and other intelligence, requiring audits or skilled persons reports to be prepared and requesting certain data to be provided periodically. 2.21 As noted above, one of the new regulatory standards relates to due diligence, risk assessment and control, which the PSA refers to as DDRAC. This requires providers to undertake more thorough verification of their contracted partners by setting clearer and more extensive DDRAC requirements. This will apply to all parties and require that sufficient checks and ongoing risk management is undertaken of any party they contract with, and by having the ability for the PSA to undertake enforcement action if these requirements are not complied with. 8
Compliance 2.22 The draft Code proposes a new structure to the PSA’s enforcement activities. It replaces the ‘track 1’ and ‘track 2’ enforcement procedures set out in the current 14th Code with a more flexible model based on engagement and enforcement. The overall aim of this is to enable the PSA to have a clearer framework around informal resolution which aims to provide more flexibility in terms of how it deals with any compliance concerns, and allow the opportunity for more cases to be dealt with through informal resolution rather than formal enforcement action. 2.23 While informal resolution of compliance concerns was possible under the current 14th Code, it was not explicitly set out and, in the PSA’s view, this limited its effectiveness. Accordingly, the draft Code sets out the ability of the PSA to issue ‘enquiry letters’ and ‘warning letters’ which are both aimed at addressed actual or potential compliance concerns through a swift informal process. 2.24 Where cases are escalated to formal enforcement, the overall approach is consistent with PSA’s existing practices and processes. The draft Code does however seek to introduce some more streamlined decision-making for certain cases where decisions can be made by a single legally qualified member of the Code Adjudication Panel (rather than a full Tribunal). In addition, the draft Code strengthens the settlement procedure with the aim of encouraging providers subject to enforcement proceedings to use the process where appropriate. Approval of the draft Code 2.25 In accordance with the statutory scheme, any draft Code must be considered and approved by Ofcom for it to have legal force. In this section, we set out our assessment of the draft Code in light of the statutory legal tests which we must consider in approving the draft Code. Legal tests under section 121 of the Act 2.26 The PSA has responsibility for drafting the Code and consulting on the substance of the Code, which is being undertaken concurrently to this consultation. Ofcom has responsibility for deciding whether or not to approve the Code, and thereby confirming the PSA as the designated person for regulating CPRS. 2.27 Under section 121(1) of the Act, Ofcom may approve the draft Code if it appears: “(a) that a code has been made by any person for regulating the provision and contents of premium rate services, and the facilities made available in the provision of such services; (b) that the code contains provision for regulating, to such extent (if any) as they think fit, the arrangements made by the providers of premium rate services for promoting and marketing those services; and 9
(c) that it would be appropriate for them to approve that code for the purposes of section 120 ….” 2.28 Under section 121(2) of the Act Ofcom may not, however, approve the draft Code unless satisfied: “(a) that there is a person who, under the code, has the function of administering and enforcing it; and (b) that that person is sufficiently independent of the providers of premium rate services; (c) that adequate arrangements are in force for funding the activities of that person in relation to the code; (d) that the provisions of the code are objectively justifiable in relation to the services to which it relates; (e) that those provisions are not such as to discriminate unduly against particular persons or against a particular description of persons; (f) that those provisions are proportionate to what they are intended to achieve; and (g) that, in relation to what those provisions are intended to achieve, they are transparent.” 2.29 Section 121(3) of the Act relates to the circumstances in which Ofcom can approve so much of the draft Code as relates to a person who is a provider of a service by virtue of section 120(12). This appears to Ofcom not to be relevant in relation to the draft Code. Impact Assessment 2.30 Impact Assessments (‘IAs’) provide a valuable way of assessing different options for regulation and showing why the preferred option was chosen. They form part of best practice in policy-making. This is reflected in section 7 of the Act, which states that we generally have to carry out IAs where our proposals would be likely to have a significant effect on businesses or the general public or when there is a major change in Ofcom’s activities. As a matter of policy, Ofcom is committed to carrying out and publishing IAs in relation to the great majority of our policy decisions. 10 2.31 The analysis presented in this document constitutes an IA for our proposal to approve the draft Code. 2.32 As part of our IAs, we conduct an Equality IA to identify whether our proposals would have particular effects on specific groups within society. We have therefore considered whether we were required to undertake a full Equality Impact Assessment for this review. On the 10For further information about our approach to IAs, see the guidelines Better Policy-Making: Ofcom’s Approach to Impact Assessment. 10
basis of our Initial Equality IA Screening, we determined that this was not required, because the changes in the draft Code do not raise specific equality issues. Consultation period 2.33 Ofcom is inviting written views and comments by 5pm on Friday 11 June 2021 on its proposed approval of the draft Code. Details of how to respond can be found in Annex 2. Consultation questions are in Annex 5. Next steps 2.34 Subject to the outcome of its consultation process, it is expected that the PSA will make its final decision on the draft Code and publish a statement in the Autumn. Subject to that process and subject to the responses to this consultation, Ofcom would expect to publish a statement on whether to approve the draft Code at the same time in the Autumn. If there are any material changes to the draft Code, Ofcom will carefully consider whether it is necessary for it to re-consult on its approval. 2.35 The PSA has proposed that the draft Code would come into effect three to six months after publication of its final statement and has invited stakeholder views on that timetable. Ofcom’s final approval (if granted) would align to this timescale. 11
3. Approving the draft Code under section 121 of the Act 3.1 This section sets out the reasons why Ofcom is provisionally of the view that it would be consistent with the legal tests set out in section 121 of the Act to approve the draft Code. 3.2 In relation to section 121(1)(a) of the Act, Ofcom provisionally considers that the draft Code, developed by the PSA, “has been made by a person for regulating the provision and contents of PRS, and the facilities made available in the provision of such services”. In Ofcom’s provisional view, that is clear from the provisions of the draft Code and there is no change in this respect compared with the current 14th Code. 3.3 In relation to section 121(1)(b) of the Act, Ofcom provisionally considers that the draft Code, “contains provision for regulating, to such extent (if any) as they think fit, the arrangements made by the providers of premium rate services for promoting and marketing those services”. Ofcom’s provisional view is that this requirement is met. We are minded to consider, for the reasons set out in this consultation, that the changes proposed in the draft Code are, amongst other things, objectively justified and proportionate measures that address relevant regulatory needs. On that basis, our provisional view is that the draft Code as a whole contains provisions for regulating the arrangements made by PRS providers for promoting and marketing relevant services to the extent Ofcom thinks fit. 3.4 In relation to section 121(1)(c) of the Act, Ofcom provisionally considers, “it would be appropriate for them to approve that code [the draft Code] for the purposes of section 120”. In considering this, we are particularly mindful of the requirements of section 121(2) of the Act since Ofcom may not approve the draft Code unless all seven such requirements are met. 3.5 The seven requirements of section 121(2) of the Act, and our specific reasons for provisionally considering that they, and the overall requirement that it is appropriate to approve the draft Code, are met, are set out below. While we have set out our assessment under each, some of our considerations are relevant to more than one requirement. We have taken all these considerations into account in assessing whether, provisionally, we think all the requirements are met. Requirement 1: “that there is a person who, under the code, has the function of administering and enforcing it” 3.6 Ofcom is provisionally satisfied that the PSA would continue to have responsibility for administering and enforcing the draft Code should it be approved under section 121 of the Act, as it does under the current 14th Code. In particular, paragraph 1.1.6 of the draft Code provides that the PSA will monitor compliance with the draft Code and, where necessary, take regulatory action such as informal engagement or formal enforcement action. 12
Requirement 2 “that that person is sufficiently independent of the providers of PRS” 3.7 Ofcom is provisionally satisfied that the PSA would, in operating in accordance with the draft Code, be sufficiently independent of the providers of PRS. Generally, the draft Code does not make any changes that Ofcom provisionally considers would have a bearing on the PSA’s independence from PRS providers. 3.8 The draft Code emphasises that the PSA operates independently from industry and that all Board members are appointed in their individual capacities only. It goes on to confirm no member of the Board may have any current commercial interest in PRS, but Board members may be appointed on the basis of their contemporary industry knowledge. 11 3.9 This principle is also reflected in the PSA’s Governance Statement, 12 which sets out how the PSA is run and includes details of its constitution, regulatory approach and operating principles, and the Board Members’ Code of Conduct 13 While these documents are not part of the draft Code, we have taken them into account in considering whether the PSA is sufficiently independent of providers of PRS. 3.10 We are minded to consider that the draft Code also contains appropriate provisions to guarantee that the bodies responsible for making adjudications are sufficiently independent of PRS. In particular, the draft Code confirms that members of the Code Adjudication Panel – who act as final decision makers in enforcement matters under the code – will not have any commercial interest in the PRS sector throughout the entire duration of their membership. Requirement 3: “that adequate arrangements are in force for funding the activities of that person in relation to the draft Code” 3.11 Ofcom is provisionally satisfied that the draft Code provides adequate arrangements for funding the activities of the PSA in relation to the draft Code. Generally, the draft Code does not make any changes to the existing arrangements that Ofcom provisionally considers would affect the adequacy of the PSA’s funding arrangements. 3.12 The PSA is a non-profit making organisation and is currently funded by a levy on industry participants calculated as a proportion of the financial transactions in the PRS value chain that are required to be collected by the Network Operator. We also note that the PSA continues to operate the registration scheme by requiring registrants to pay a reasonable registration fee. 3.13 The PSA consults on its business plan and budget each year, following which the business plans and budget (and the level of the levy necessary to meet that budget) are submitted to Ofcom for consideration and approval in accordance with the Code and Memorandum 11,See section 1.4 of the draft Code 12 PSA, Governance Statement, November 2019 13 PSA, Handbook and Code of Conduct for Board Members, November 2019 13
of Understanding. The funding arrangements for the PSA are set out in full detail in chapter 7 of the draft Code. Requirement 4: “that the provisions of the draft Code are objectively justifiable in relation to the services to which it relates” 3.14 Ofcom provisionally considers that the provisions of the draft Code are objectively justifiable in relation to the services to which it relates. In particular, Ofcom considers that the draft Code – which builds on the PSA’s new strategic purpose 14 – will establish an appropriate regulatory regime for PRS by building a framework that both seeks to reduce the risks of consumer harm occurring and provides for strong and effective enforcement. 3.15 The draft Code represents a change in the regulatory approach of the PSA which is seeking to be a more proactive regulator that seeks to address harm, or potential harm, before it occurs in order to build consumer trust and confidence in the market. It does so by placing greater emphasis on verification and ongoing supervision by the PSA, including more stringent requirements relating to due diligence undertaken by Network operators and Intermediary providers in the value chain on parties they contract with for the provision of CPRS. This is intended to ensure the Code is fit for purpose not only for the market and consumer expectations today but also in light of potentially rapid changes driven by the growing importance of digital markets. 3.16 This is an evolution of the underlying approach adopted by the PSA in recent codes of practice, which was an outcomes-based model that emphasised ex post enforcement as the key tool to achieve compliance. 3.17 We consider that the aims and objectives set out in the PSA consultation, and summarised above at paragraph 2.15, are appropriate in the context of the PRS market, and indeed are necessary to ensure a well-functioning market that delivers for consumers. 3.18 To a significant extent, the draft Code builds on the existing rules and requirements of the current 14th Code, however we consider there are three key changes it is important to consider in detail. Regulatory standards and requirements 3.19 The draft Code sets out seven consumer-facing standards and three organisational standards each of which are supported by a set of more detailed requirements. In our view, consolidating the core regulatory elements of the Code of Practice in this framework helps ensure the objective of each requirement is clear. Having considered each standard, and the overall framework, we consider the standards, and their associated requirements, are objectively justified for the reasons set out below. a) The Integrity standard requires organisations and individuals involved in the provision of the PRS to act with integrity and in such a way that will not bring the PRS market into 14 PSA, Strategic Purpose, December 2019. 14
disrepute. It is supported by requirements that, in particular, requires providers to take steps to ensure that the Code is complied with and that consumer complaints are resolved quickly and fairly. We consider this will help foster trust in the PRS market and act as a deterrent to providers whose practices could harm consumers. b) The Transparency standard requires that consumers receive full and clear information to enable them to make a fully informed purchasing decision. It is supported by a range of detailed requirements including the promotion and marketing of PRS, the use of certain services and receipting arrangements. We consider that this will help improve overall consumer confidence in PRS by ensuring consumers are able to make informed decisions throughout their use of any particular PRS. c) The Fairness standard requires that consumers must be treated fairly throughout their experience of PRS including being charged for PRS only where they have provided informed and robust consent. It is supported by a range of detailed requirements, including requirements for multi-factor authorisation (in certain circumstances) and retaining evidence of consumer consent. We consider that this will help ensure customers are not charged for services they do not want to purchase and are not misled into doing so. d) The Customer care standard requires that customers must receive excellent and timely customer care including the resolution of their complaints. It is supported by requirements setting out how customer enquiries and complaints should be handled and, where relevant, how refunds should be provided to consumers. We consider that this will help ensure consumers have good experiences of PRS and will help protect consumers where things go wrong. e) The Vulnerable consumers standard requires that services are promoted and provided in a way that ensures they are not likely to cause harm or detriment to vulnerable consumers. It is supported by a requirement for providers to have, and to be able to produce on request, policies and procedures aimed at mitigating risks to vulnerable consumers. In addition, there are specific requirements for the protection of children, including age verifications for certain services. We consider this will help ensure vulnerable consumers are protected from harm. f) The Consumer privacy standard requires consumer privacy must be respected and protected. It is supported by requirements relating to the collection of consumer’s data, including personal data. We consider that this will help ensure that the personal information of consumer is collected lawfully and responsibly. g) The Prevention of harm and offence standard requires that promotions and services are provided in a manner that does not cause harm or unreasonable offence or distress to consumers or to the general public. It is supported by requirements for providers to ensure PRS do not promote or incite hatred, encourage consumers to put themselves at risk and do not cause fear, anxiety, distress or offence in consumers or the general public. We consider that this will help ensure PRS are provided in a safe and responsible manner that minimises certain risks of consumer harm. 15
h) The Organisation and service information standard requires organisations and individuals involved in providing PRS to provide the PSA with timely, accurate and detailed information. It is supported by requirements for PRS providers to register with the PSA and provide, and keep update, certain information their organisation and services. We consider that this will ensure the PSA has appropriate oversight over the PRS market, providing greater transparency and enabling effective regulatory interventions. i) The Due diligence, risk assessment and control (DDRAC) standard requires that organisations and individuals perform effective due diligence on any person or organisation with whom they contract in relation to PRS, and conduct a full and thorough ongoing assessment of potential risks arising from the provision, content, promotion and marketing of PRS. It is supported by requirements setting out the how providers should undertake these activities (including by complying with the additional requirements set out in annex 2 to the draft Code) and setting out particular expectations of intermediary providers and network operators. We consider that this is appropriate to ensure a culture of compliance through the PRS value chain and ensure that consumers are adequately protected from harm. This aligns with the PSA’s objective of preventing non-compliance in the first place, and the consequent consumer harm, rather than dealing with issues after the event. j) The Systems standard requires that providers have in place systems (including relating to payment and consent verification) that are technically robust and secure. It is supported by requirements setting out how providers should ensure systems are operated with specific requirements for intermediary providers (including to comply with the technical standards set out annex 3 to the draft Code) and network operators. We consider that this will help ensure providers’ systems remain secure and minimise the risk that consumers are charged for services they did not intend to purchase. 3.20 In addition to these general standards, the draft Code also imposes a number of service- specific requirements for Society Lotteries, Professional Advice, Competitions (including broadcast voting), Remote Gambling, Live Entertainment, and Service using virtual currency. We consider that these requirements are appropriate in light of the specific risks associated with these services. Supervision 3.21 A significant new feature of the draft Code is the set of supervisory powers described in chapter four of the draft Code. The objective of these powers is to enable to PSA to have ongoing oversight of PRS providers and services in order to achieve and maintain compliance with the code. We consider that this will help ensure that the provisions of the draft Code are, in practice, complied with thereby ensuring customers are better protected from actual or potential harm. 3.22 As part of our assessment we have considered whether each of the supervisory tools is objectively justified given the PSA’s overall objective of supporting and monitoring compliance with all the obligations set out in the draft Code. These tools include: 16
a) requiring a PRS provide to submit an audit report annually or periodically as specified by the PSA; b) requiring a PRS provider to periodically report data and information; and c) requiring a PRS provider to produce a report on any matter related to the provision of PRS or to appoint a person to produce such a report. 3.23 We consider that these tools are appropriate and are necessary in order to enable the PSA to undertake supervisory activities with the aim of ensuring compliance and mitigating the risks of consumer harm. Engagement and enforcement 3.24 The draft Code builds on the existing models of enforcement that have been employed by the PSA in recent codes of practice but, in addition, sets out a range of alternative processes. This includes: a) A clearer framework for informal resolution of compliance concerns; b) A more flexible framework for formal enforcement that allows for better use of pre- enforcement steps, such as the use of enquiry letters and warning letters that may enable compliance concerns to be resolved; c) An enhanced settlement process to enable quicker resolution of certain matters, for the benefit of both the PSA and industry stakeholders; and d) A more flexible decision-making procedure for enforcement cases that would allow a single legally qualified member of the CAP to make certain decisions. 3.25 We consider that these streamlined processes will improve the efficiency and effectiveness of the PSA’s enforcement regime and will, in particular, enable parties who wish to cooperate with those streamlined processes to benefit from a quicker resolution in individual matters. We have also assessed those aspects of the draft Code which strengthen, or otherwise change, other elements of the enforcement regime. 15 This includes changes to the interim measures, the threshold for individual sanctions and the availability of an oral hearing procedure. We consider that these changes are objectively justifiable and will help ensure an effective enforcement regime. 3.26 Finally, we have carefully considered the information gathering powers set out in the draft Code. We note these strengthen and expand upon the information gathering powers set out in previous codes. In our view, the ability for the PSA to gather accurate information, and rely on it, is critical to its ability to effectively regulate the sector and to make well- informed decisions, including those associated with enforcement. We provisionally consider the information gathering powers set out in the draft Code are objectively justified to achieve those goals. 15 We note s121(5) of the Act provides for enforcement provisions. 17
3.27 Accordingly, taking all these points together, our provisional view is that the draft Code as a whole meets the relevant objective justification requirement. Requirement 5: “that those provisions are not such as to discriminate unduly against particular persons or against a particular descriptions of persons” 3.28 Ofcom provisionally considers that the provisions of the draft Code do not discriminate unduly against particular persons or against a particular description of persons. The draft Code, including its standards and underlying requirements, will be applied uniformly to relevant parties engaged in the premium rate sector, as defined under section 120 of the Act. 3.29 The draft Code provides for more flexible regulation and in particular the ability for regulatory parties to achieve the specified regulatory standards through alternative means (other than strict adherence to the underlying requirements of that standard). While this may mean that certain parties benefit from a different regulatory context, we provisionally consider that this would be consistent with a Code that is not unduly discriminatory. This framework enables the PSA to take a different regulatory approach where the circumstances justify that approach and avoids creating an unnecessarily rigid code that fails to take account of different circumstances. We note that that tailored approach to regulation set out in section 2.6 of the draft Code is in principle available to all providers of PRS and, where this provision is used, the PSA intends to publish details of any such arrangements on its website. 3.30 In relation to enforcement, the draft Code provides the PSA with greater procedural flexibility (relative to the current 14th Code). In particular, it codifies the PSA’s ability to resolves matters informally, to settle cases where appropriate and adopt streamlined decision making in certain cases (in which a single legally qualified member of the CAP would make a decision rather than a full Tribunal). As above, we provisionally consider that this flexibility will enable the PSA to adopt approaches that reflect particular circumstances and results in both efficiency and effectiveness benefits. 3.31 The PSA will in due course publish supporting guidance and published procedures, which will further set out how the PSA would expect to use these differentiated models of regulation and enforcement. We expect these procedures will provide assurance that the PSA will, in practice, operate this more flexible code in a way that is fair and not unduly discriminatory. Requirement 6 “that those provisions are proportionate to what they are intended to achieve” 3.32 Ofcom provisionally considers that the provisions of the draft Code are proportionate to what they are intended to achieve. The central objective of PRS regulation is to protect consumers from the risks of harm that may accompany the use of such services. As set out above, we think the provisions of the draft Code pursue legitimate and appropriate objectives and are objectively justified in order to achieve those objectives. We 18
provisionally consider that the provisions of the draft Code go no further than necessary to achieve those objectives and as such do not impose an unreasonable regulatory burden. 3.33 In particular we have considered the standards, and associated requirements, set out in chapter 3 of the draft Code. These build on the prevailing regulatory framework which has long been accepted as appropriate and necessary and take account of the evolving needs of the sector. We provisionally consider they are proportionate to the overall objectives of the draft code. 3.34 We have also considered whether the supervision framework set out in chapter 4 of the draft Code and the engagement and enforcement framework set out in chapter 5 of the draft Code are proportionate. In our view these frameworks are necessary to achieve the overall objective of a code that enables a more proactive form of regulation. We note that in both cases, they will be subject to further safeguards as the PSA will set out, in advance through its published procedures, how it will use the powers and processes provided by these frameworks. Requirement 7: “that, in relation to what those provisions are intended to achieve, they are transparent” 3.35 Ofcom provisionally considers that, in relation to what the draft Code is intended to achieve, the proposed provisions are transparent. 3.36 The draft Code has been produced by the PSA following extensive industry engagement and prior consultation. This includes the publication of a discussion document in February 2020 setting out the PSA’s objectives, early thinking and inviting stakeholder input. This was supported by a series of stakeholder discussions, including: a) Topic-based webinars; b) One-to-one, and group, industry meetings; c) Engagement with consumer advocacy bodies; and d) Gaining experience from other regulators. 3.37 On 8 April 2021, the PSA published the draft Code in full together with a detailed consultation document which set out its reasons for proposing to introduce the draft Code. This document also sets out how the PSA had taken into account the feedback from industry through its early engagement steps. Subject to the completion of this consultation process, we consider that draft Code has been developed in a transparent manner. 3.38 We also provisionally consider that the provisions of the draft Code are transparent in relation to what they are intended to achieve. The draft Code sets out clearly the expectations, requirements and regulatory approach associated with its proposed provisions. It provides for the PSA to publish, and where necessary consult on, relevant materials that further clarify the operation of the code, including the PSA’s guidance and published procedures, and any relevant best practice information. 19
Ofcom’s provisional view is that it would be appropriate to approve the proposed Code 3.39 Ofcom may not approve the draft Code unless we are satisfied of the above matters, as set out in section 121(2) of the Act. We must also be satisfied that it is appropriate for us to approve it. In deciding whether we are satisfied of such matters, Ofcom must act consistently with its general duties under section 3 of the Act, and in accordance with the six requirements set out in section 4 of the Act. We set out our provisional assessment as to those matters, and on approval of the draft Code overall, below. Section 3: Ofcom’s general duties 3.40 Section 3(1) of the Act sets out the principal duties of Ofcom in carrying out its functions: a) to further the interests of citizens in relation to communications matters; and b) to further the interests of consumers in relevant markets, where appropriate by promoting competition. 3.41 Section 3(2) and 3(4) of the Act are also relevant. They set out matters Ofcom must secure and/or have regard to pursuant to our duties. Section 3(4) provides that, in performing its duties, Ofcom must have regard to “such of the following as appear to them to be relevant in the circumstances”, including: a) the desirability of promoting competition in relevant markets; b) the desirability of promoting and facilitating the development and use of effective forms of self-regulation; c) the desirability of encouraging investment and innovation in relevant markets; d) the vulnerability of children and of others whose circumstances appear to Ofcom to put them in need of special protection; e) the needs of persons with disabilities, of the elderly and of those on low incomes; f) the desirability of preventing crime and disorder; g) the opinions of consumers in relevant markets and of members of the public generally; and h) the extent to which, in the circumstances of the case, the furthering or securing of the matters mentioned in subsections (1) and (2) is reasonably practicable. 3.42 Section 3(3) of the Act provides that, in performing their duties under subsection (1), Ofcom must have regard, in all cases, to: a) the principles under which regulatory activities should be transparent, accountable, proportionate, consistent and targeted only at cases in which action is needed; and b) any other principles appearing to Ofcom to represent the best regulatory practice. 20
3.43 Section 3(5) of the Act provides that Ofcom, in performing its duty of furthering the interests of consumers, must have regard, in particular, to the interests of those consumers in respect of choice, price, quality of service and value for money. Section 4: The six Section 4 duties 3.44 Section 4 of the Act sets out six requirements which Ofcom, in carrying out its functions under inter alia Chapter 1 of Part 2 of the Act, must act in accordance with. 3.45 In broad terms, the six requirements are as follows: a) to promote competition, including in relation to: i) the provision of electronic communications networks and services, ii) the provision and making available of services and facilities that are provided or made available in association with the provision of electronic communications networks or services, and iii) the supply of directories capable of being used in connection with the use of electronic communications networks or electronic communications services. b) to promote the interests of all members of the public in the United Kingdom; c) to take account of the desirability of Ofcom’s carrying out it functions in a manner which, so far as practicable, does not favour (a) one form of electronic communications network, service or associated facility, or (b) one means of providing or making available such a network, service or facility, over another; d) to encourage (to such extent as Ofcom consider appropriate for certain purposes which are specified in section 4(8) of the Act) the provision of network access and service interoperability; e) to encourage such compliance with the standards specified in section 4(10) of the Act as is necessary for facilitating service interoperability and securing freedom of choice for customers of communications providers; and f) to promote connectivity and access to very high capacity networks by members of the public and businesses in the United Kingdom. Conclusion 3.46 Ofcom has carefully considered the draft Code and considers that, subject to the outcome of this consultation it would be appropriate for Ofcom to approve it. This provisional view is also conditional on the outcome of the PSA’s parallel consultation on the substance of the draft Code. 3.47 In reaching this provisional conclusion, Ofcom has had regard to its duties under section 3 of the Act and, so far as relevant, section 4. Ofcom believes that approval of the draft Code would be compatible with those duties, not only because the draft Code would be in line with Ofcom’s primary duty to further the interests of citizens and consumers, but also 21
because, amongst other things, it would promote greater consumer confidence in the PRS market and, as a result, encourage investment and innovation, and promote competition, in the sector. 3.48 In particular, Ofcom considers that effective competition can only exist where consumers are not misled about the cost or nature of services and where traders who cause consumer harm are held accountable. We are satisfied that the draft Code would further these aims. 3.49 In these ways, and others described in this document, the provisions of the draft Code, in our provisional view, satisfy the sorts of principles of fairness, effectiveness and efficiency with which the Code must be consistent. This contributes to our provisional satisfaction that approving it would be in line with our duties. 3.50 Finally, we would draw stakeholders’ attention to the fact that the role of Ofcom is different to that of the PSA. The PSA is responsible for drafting the Code and is currently consulting on the substance of the draft Code. Stakeholders are encouraged to engage with that consultation. This consultation by Ofcom focuses on the extent to which the draft Code meet the legal tests for approval under the Act and that Ofcom approving it would be appropriate and consistent with those legal tests. 3.51 Ofcom would like to invite views on its position that it would be appropriate for the draft Code to be formally approved under section 121 of the Act. The consultation period will close at 5pm on 11 June 2021. Question 1: Do you consider Ofcom should approve the PSA’s 15th Code of Practice in its current form? Please provide an explanation to support your response. Question 2: Do you have any views on the appropriate implementation period? 22
A1. [Draft] Notification of Approval of a Code for Premium Rate Services under section 121 of the Communications Act 2003 The approval of a Code for premium rate services for the purpose of sections 120 and 121 of the Communications Act 2003 Background A1.1 Section 121 of the Communications Act 2003 (c. 21) (“the Act”) empowers the Office of Communications (“Ofcom”), subject to being satisfied of certain matters specified in that section, to approve a code which has been made by any person for regulating the provision and contents of premium rate services, and the facilities made available in the provision of such services A1.2 On 8 April 2021 the Phone-paid Services Authority (PSA) published a draft Code of Practice (“the draft Code”) and a consultation document seeking stakeholder views on its content. In addition, the PSA consulted with Ofcom on the content of the code during its developed and ahead of the publication of the draft Code. A1.3 On 30 April 2021 Ofcom published a consultation document on the draft Code, stating that Ofcom was minded to approve that draft Code under section 121 and inviting comments on that proposal; and A1.4 Ofcom has now considered the responses which it received to the consultation document and, for the reasons set out in the Statement which accompanies this Notification, Ofcom considers that the requirements for the purposes of approving a code set out in section 121 of the Act have been satisfied and that it would be appropriate and in accordance with Ofcom’s statutory duties now to approve the draft Code. Decision A1.5 Pursuant to sections 120 and 121 of the Act, Ofcom approves the draft Code which will take effect on [date]. Interpretation A1.6 In this Notification, unless the context otherwise requires, words or expressions used shall have the same meaning as they have been ascribed in the Act. A1.7 In this Notification – a) “Act” means the Communications Act 2003; b) “PSA” means the Phone-paid Service Authority; and 23
c) “draft Code” means the draft Code for Premium rate service published by the PSA on 8 April 2021. A1.8 For the purpose of interpreting this Direction— a) headings and titles shall be disregarded; b) expressions cognate with those referred to in this Notification shall be construed accordingly; and c) the Interpretation Act 1978 (c. 30) shall apply as if this Notification were an Act of Parliament. Signed by Gaucho Rasmussen A person authorised by Ofcom under paragraph 18 of the Schedule to the Office of Communications Act 2003 April 2021 24
A2. Responding to this consultation How to respond A2.1 Ofcom would like to receive views and comments on the issues raised in this document, by 5pm on 11 June 2021. A2.2 You can download a response form from https://www.ofcom.org.uk/consultations-and- statements/category-2/approval-of-psa-code-of-practice-15. You can return this by email or post to the address provided in the response form. A2.3 If your response is a large file, or has supporting charts, tables or other data, please email it to ian.strawhorne@ofcom.org.uk, as an attachment in Microsoft Word format, together with the cover sheet. A2.4 We welcome responses in formats other than print, for example an audio recording or a British Sign Language video. To respond in BSL: • Send us a recording of you signing your response. This should be no longer than 5 minutes. Suitable file formats are DVDs, wmv or QuickTime files. Or • Upload a video of you signing your response directly to YouTube (or another hosting site) and send us the link. A2.5 We will publish a transcript of any audio or video responses we receive (unless your response is confidential) A2.6 We do not need a paper copy of your response as well as an electronic version. We will acknowledge receipt if your response is submitted via the online web form, but not otherwise. A2.7 You do not have to answer all the questions in the consultation if you do not have a view; a short response on just one point is fine. We also welcome joint responses. A2.8 It would be helpful if your response could include direct answers to the questions asked in the consultation document. The questions are listed at Annex 5. It would also help if you could explain why you hold your views, and what you think the effect of Ofcom’s proposals would be. A2.9 If you want to discuss the issues and questions raised in this consultation, please contact Ian Strawhorne by email to ian.strawhorne@ofcom.org.uk. Confidentiality A2.10 Consultations are more effective if we publish the responses before the consultation period closes. In particular, this can help people and organisations with limited resources or familiarity with the issues to respond in a more informed way. So, in the interests of transparency and good regulatory practice, and because we believe it is important that everyone who is interested in an issue can see other respondents’ views, we usually publish all responses on the Ofcom website as soon as we receive them. 25
You can also read